Provider key management UI in dashboard #14
Description
Dashboard currently requires API calls to manage stored provider keys.
Add a UI page for:
- List stored provider keys (masked, showing provider + last 4 chars)
- Add new provider key (encrypted with AES-GCM vault)
- Delete/revoke stored keys
- Test connection button (optional)
Similar to the existing API Keys page pattern.